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Description 

Method and System for Approving Card 

Transactions 

Background of Invention 

[0001] The invention relates to the approval of card transactions 
by card issuers and more specifically to the approval of 
credit/debit card transactions based on the digital signa- 
tures of cardholders. 

[0002] | n the world of plastic cards, particularly credit cards, for 
many years, considerable efforts have been made to elim- 
inate or at least minimize the financial losses resulting 
from mistakenly approving fraudulent transactions. 

[0003] a typical credit card transaction is performed when a 

cardholder hands over their credit card to a merchant. The 
merchant performs a request for approval operation by 
swiping the card to an electronic point of sale (POS) termi- 
nal to acquire the necessary card account data stored in a 
magnetic stripe of the credit card. The merchant also in- 
puts other transaction data including the purchase 



amount to form a request for approval message. The re- 
quest for approval message is then transmitted to the 
card issuer via an acquirer service provider. 

[0004] The acquirer service provider provides a POS terminal 

management system that manages/controls all installed 
POS terminals at the merchant sites. The POS terminal is 
usually owned by the acquirer service provider and placed 
at the merchant site. The acquirer service provider obtains 
merchants as customers and then installs the POS termi- 
nals at the merchant sites. The acquirer service provider 
then manages the installed POS terminals. 

[0005] The acquirer service provider and the card issuer can be 
the same, for example AMEX, which acquires the mer- 
chants and places the POS terminals at the merchant sites, 
while also issuing AMEX credit cards to cardholders. Ac- 
quiring the merchants and issuing the cards to cardhold- 
ers are two different businesses. In a company such as 
AMEX, the two functions are done by the same company 
but run by different business units. 

[0006] The VISA/Mater Card system illustrates a different ac- 
quirer/issuer arrangement. Some banks can be both is- 
suers and acquirers, while other banks might be only card 
issuers. For example, bank-A can be both an acquirer and 



an issuer, while bank-B and bank-C might only be card 
issuers. If a customer of bank -B or bank-C uses the ser- 
vices of bank-A, then bank-A might charge a fee to bank- 
B or bank-C. 

[0007] The acquirer service provider can also be a non-bank 
(independent entity), which acquires the merchants and 
provides the POS terminals. This type of acquirer service 
provider often charges fees to all the card issuers, usually 
financial institutions, for using its services. In summary, 
the acquirer service provider usually controls the mer- 
chant and POS terminal side of the transactions while the 
card issuer manages the cardholder and the card issuer 
side of the transactions. 

[0008] jhe conventional way of approving a credit card transac- 
tion is typically based on the status of the card account 
information stored in a database of the card issuer such 
as the credit limit and the card validity, without really 
knowing whether the user of the card is the true card- 
holder. The card data, typically stored in the magnetic 
strip on the backside of the card, can be easily copied to 
another card and this "copied card" can be used to per- 
form fraudulent transactions. These fraudulent transac- 
tions will be repeatedly approved by the card issuer until 



either the card issuer or the true cardholder realize that 
such frauds have occurred. 

[0009] The growth of transactions over the Internet using credit 
cards has been limited by the inadequacy of security 
means to protect the effected parties such as the card is- 
suers and the cardholders. 

[0010] Debit cards with a PIN based security scheme are better at 
minimizing the fraudulent plastic card transactions. How- 
ever, the PIN (personal identification number) is a fix 
code, which bears a risk of discovery by others when used 
out in the open. Moreover, such a scheme encounters 
many challenges when transactions are performed over 
the Internet, as the PIN may be disclosed to unauthorized 
parties. 

[0011] IC cards, more generally known as smart cards, are re- 
placing the conventional magnetic stripe cards, as the 
smart cards can provide better security. However, the use 
of smart cards requires much time and expense to replace 
(or at least upgrade) all existing point-of-sale terminals at 
merchant sites, which typically accept magnetic stripe 
cards, with new terminals that can accept the smart cards. 
This involves huge labor costs for replacing/upgrading 
the terminals, training the users, etc. Doing this on a 



world wide basis is a very expensive and time consuming 
proposition. 

[0012] | t would be desirable to provide a method and system that 
is able to make use of the existing infrastructures, while 
at the same time both providing a secure way for credit 
and debit cardholders to use the cards for performing 
transactions, and providing a secure way for the cards is- 
suers to approve the transactions. 
Summary of Invention 

[0013] The present invention provides a method and system for 
approving a credit card transaction, based on a dynamic 
digital signature of a cardholder in addition to the con- 
ventional way of approving the transaction. 

[0014] The present invention further provides a method and sys- 
tem for approving a debit card transaction, based on a 
dynamic digital signature of a cardholder instead of or in 
addition to using a PIN. 

[0015] Firstly, transaction data is obtained by a cardholder. The 
transaction data can include an amount of money to be 
settled. The transaction data can additionally include 
other data such as card account data, a cardholder's ref- 
erence number, a merchant identification data, a point- 
of-sale terminal identification data and other related data. 



[0016] Secondly, a digital signature of the cardholder is gener- 
ated based on the transaction data. 

[0017] Accordingly, the card issuer verifies the digital signature 
to thereby approve or disapprove the transaction. 

[0018] The present invention can assure credit cardholders and 
encourage them to use the card for performing transac- 
tions without worrying about disclosing the card data to 
others, while at the same time protecting the card issuer 
from bearing the risk of approving fraudulent transactions 
caused by unauthorized use of the cards. 

[0019] The present invention can further encourage a debit card- 
holder to use the card for transacting without having to 
use the PIN number in an open environment, especially in 
transactions over the Internet. 

[0020] The present invention provides a secure way of purchas- 
ing goods and services, paying bills, mortgage loans, etc. 
over the Internet using credit or debit cards. 

[0021] The present invention further provides a secure way of 
purchasing goods and services, paying bills, mortgage 
loans, etc. through a publicly available self-service termi- 
nal using credit or debit cards. 

[0022] when the present invention is used, lost or stolen cards 
do not need to be reported since transactions using these 



cards will not be approved by the issuer without the pres- 
ence of the digital signature of the true cardholder. Addi- 
tionally, the card data, such as the card number of a lost 
or stolen card, can be reused on a replacement card with- 
out the card issuer having to assign new card data. This 
invention even allows the cardholder's official identifica- 
tion number such as a social security number, to be used 
as part of the card account number, rather than using a 
conventional numbering system, while still providing good 
security. 

[0023] The present invention further reduces the cost of produc- 
ing the card itself, without the need for sophisticated 
hologram and other attributes for preventing the imitation 
of the card, since there is no incentive for the imitator to 
do so. 

[0024] The replacement/upgrading of terminals, as well as the 

re-training, waste the precious time of the merchants who 
are supposed to focus on the business. The present in- 
vention can be implemented over the existing infrastruc- 
ture, maintaining the use of existing point-of-sale termi- 
nals at merchant sites, without the need to replace or up- 
grade the existing point-of-sale terminals and re-train 
the merchants in the use of new technologies. 



[0025] The present invention protects the interests of all involved 
parties such as the card issuer, the cardholder, an ac- 
quirer and the merchant. 

[0026] The present invention is independent of the technology. In 

the case of the decision has been made to go for a smart 

card or other technologies to replace the conventional 

magnetic stripe card, the present invention can well be 

applied. 
Brief Description of Drawings 

[0027] FIGURE 1 is a flow chart illustrating the method of the 
present invention. 

[0028] FIGURE 2 is a simplified diagrammatic view of a card- 
holder apparatus for implementing the embodiments. 

[0029] FIGURE 3 is a simplified diagrammatic view of a card is- 
suer apparatus for implementing the embodiments. 

[0030] FIGURE 4A is a flow chart illustrating an exemplary em- 
bodiment of the present invention. 

[0031] FIGURE 4B is a schematic representation of the embodi- 
ment of FIGURE 4A. 

[0032] FIGURE 5A shows a display on the cardholder apparatus 
before the signature is generated according to the em- 
bodiment of FIGURE 4A. 

[0033] FIGURE 5B shows a display on cardholder apparatus after 



the signature is generated according to the embodiment 
of FIGURE 4A. 

[0034] FIGURE 5C shows a simplified request for approval mes- 
sage transmitted from the merchant terminal to the card 
issuer apparatus according to the embodiment of FIGURE 
4A. 

[0035] FIGURE 5D shows a simplified authorization message 
transmitted from the card issuer apparatus to the mer- 
chant terminal according to the embodiment of FIGURE 
4A. 

[0036] FIGURE 5E shows a transaction slip according to the em- 
bodiment of FIGURE 4A. 

[0037] FIGURE 6 is a flow diagram of an exemplary embodiment 
for producing a short signature with improved security. 

[0038] FIGURES 7A-B show several examples of the data combi- 
nation techniques according to the embodiment of FIGURE 
6. 

Detailed Description 

[0039] FIGURE 1 illustrates the general method of the present in- 
vention. The method comprises three general steps. 

[0040] The first step 110 is the step of acquiring the transaction 
data. The transaction data such as an amount is normally 
obtained from a merchant at the point of sale or displayed 



on the screen in a transaction over the Internet. 
[0041] The second step 120 is the step of generating a card- 
holder's digital signature. The digital signature is gener- 
ated based on the transaction data. The transaction data 
can include an amount of money to be settled and other 
data such as merchant identification data, point-of-sale 
terminal identification data, etc. The transaction data can 
further include a card account number and other data 
specific to the cardholder such as a cardholder's reference 
number, etc. 

[0042] The cardholder's reference number is a number that is 

unique for each transaction of a cardholder and therefore 
has a dynamic or changing value. More generally the ref- 
erence number can be referred to as a reference code 
since it can include numbers and/or letters and/or other 
symbols. Using a reference number along with the digital 
signature increases the security of the card transactions. 
For example, without the reference number the same dig- 
ital signature might be generated for purchases for the 
same amount of money. Thus, fraudulent transactions can 
be performed by copying a previously used signature and 
once again charging or debiting the same amount of 
money. On the other hand, when a unique reference num- 



ber is provided for each transaction, it is much harder to 
perform such fraudulent transactions. 

[0043] The cardholder's reference number can either be pro- 
duced at the card issuer apparatus or at the cardholder 
apparatus. The card issuer can more generally be referred 
as a card transaction approver and the card issuer appa- 
ratus can thus more generally be referred to as a card 
transaction approver apparatus. 

[0044] when the cardholder's reference number is produced at 
the card issuer apparatus, the reference number can be 
issued by the card issuer based on the request from the 
cardholder or based on the initiative of the card issuer. 
The request and the issuance of the reference number(s) 
are preferably done through electronic means such as SMS 
(short messaging services), MMS (multimedia messaging 
services) or e-mail. The reference number can be a serial 
number or a specific number generated using a special 
mathematical formula. 

[0045] when the reference number is produced at the cardholder 
apparatus and the serial number is being used, the card 
issuer can assign a starting number to a cardholder and 
the apparatus increments it for each transaction. Alterna- 
tively, the reference number can also be a random number 



generated within the apparatus. In any case, where a ref- 
erence number is to accompany a digital signature, the 
card issuer also needs to be able to determine what value 
the reference number accompanying the digital signature 
should have for a given transaction in order to verify the 
transaction. 

[0046] Alternatively, in the case when the reference number is a 
serial number, the reference number does not need to ac- 
company the digital signature since the card issuer (i.e. 
the card issuer apparatus) always knows the value of the 
reference number for the transaction/next transaction. 
This scheme allows the cardholder to present less data 
(only the digital signature and not the reference number is 
needed) for convenience and practicality. This scheme re- 
quires the value of the reference number at the card- 
holder's side to always be in synchronization with the 
value of the reference number at the card issuer's side. 
This scheme can be implemented by having a function in 
the cardholder apparatus (discussed below) for recovering 
the used reference number, in case a digital signature has 
already been generated but not used due to the cancella- 
tion of a transaction, for example. 

[0047] There are many other ways of implementing the card- 



holder's reference number. 
[0048] The third step 130 is the verification step. The card issuer 
apparatus verifies the received digital signature, approves 
the transaction and sends an authorization message to 
the merchant apparatus typically via an acquirer apparatus 
provided by an acquirer service provider. The acquirer ap- 
paratus can be a POS terminal or can be a computer, for 
example, when the transaction is performed over the In- 
ternet. 

[0049] a cardholder apparatus 200 of FIGURE 2 such as a cellular 
phone, a PDA, or any handheld mobile electronic device, is 
equipped with at least a display module 210, an input 
module 220 and a signature module 230. The signature 
module 230 can include at least: an existing crypto- 
graphic algorithm(s) or a specific mathematical formula 
for generating a digital signature; a file for storing the 
cardholder's secret key(s); a file for storing the card- 
holder's reference number(s) or an alternative program 
based on specific mathematical formula for producing the 
cardholder's reference number or an alternative program 
for producing a random number instead; a file for storing 
the card account data such as card account number, card- 
holder's name, card type, issuer name, etc.; and a file for 



keeping the transaction records. 

[0050] a card issuer apparatus 300 of FIGURE 3 is equipped with 
at least a conventional (prior art) card management sys- 
tem 310 and a signature system 320. The signature sys- 
tem 320 can include at least: a signature program, which 
corresponds to that of apparatus 200, for verifying the re- 
ceived digital signature; a database for storing the corre- 
sponding secret keys of the cardholders. 

[0051] The detailed steps of the embodiment are now described 
with additional reference to FIGURES 4A and 4B. 

[0052] At step SI, a cardholder is issued one or more secret keys 
(depending on the signature scheme being used) and ref- 
erence numbers, which are securely stored in a card- 
holder's apparatus. The storage and access of the secret 
key(s) and the reference number(s) are preferably con- 
trolled through an authentication process. The authenti- 
cation can be done using password/PIN and/or biometric 
means. The secret key can alternatively be issued by an 
authorized third party. When an open-key cryptosystem 
such as RSA is being used, the cardholder can be assigned 
a pair of private and public keys, where the public key can 
be shared among several card issuers. 

[0053] At step 410, when a transaction is to be settled, a card- 



holder obtains transaction data such as transaction 
amount to be settled from a merchant or a vendor (see 
step S2). 

[0054] At s t e p 420, upon obtaining the transaction amount 415, 
the cardholder activates the signature module 230 prefer- 
ably through an authentication process. The display mod- 
ule 210 displays the screen of FIGURE 5A, where the card- 
holder is prompted to enter the transaction amount 415 
at the position 510 on the screen. A pre-stored card- 
holder's reference number 418 is automatically extracted 
from a file within the cardholder apparatus 200. A digital 
signature 520 shown on the display in FIGURE 5B is then 
generated based on the amount 415 and the reference 
number 418, employing the pre-stored cardholder's se- 
cret key with the cryptosystem. The card data such as the 
card account number pre-stored in the apparatus 200 can 
optionally be included in the signature generation. Note 
that the signature 520 contains the reference number, 
where the first 4 characters are the reference number 
concatenated with the last 4 characters of the signature 
itself (reference number || signature). The 4-character 
signature can be obtained from a portion of a signature 
generated by applying a symmetric cryptosystem such as 



DES or 3DES to the transaction data. 

[0055] At step 425, the generated digital signature 520 is pre- 
sented to the merchant such as by writing on the bill or a 
piece of paper, for example. The cardholder also presents 
the card to the merchant along with the generated signa- 
ture (see step S3). 

[0056] At step 430, upon obtaining the signature and the card, 
the merchant performs a standard request for approval 
operation, for example, by swiping the card to the mer- 
chant apparatus such as an electronic point of sale (POS) 
terminal to acquire the necessary card account data stored 
in the magnetic stripe, followed by inputting the other 
transaction data including the amount to form a request 
for approval message. At this stage, the presented digital 
signature is also input to the merchant apparatus for in- 
clusion in the request for approval message, which is then 
transmitted to the card issuer apparatus 300 via the ac- 
quirer apparatus (see step S4). FIGURE 5C shows an ex- 
ample of a request for approval message including a digi- 
tal signature 530, which is transmitted from the merchant 
apparatus to the card issuer apparatus 300. 

[0057] At step 435, upon receiving the request for approval mes- 
sage from the merchant apparatus, the card issuer appa- 



ratus 300 performs a standard verification process along 
with additional verification of the received cardholder's 
digital signature and reference number. Note that the 
4-character signature is first extracted from the received 
signature which includes the reference number concate- 
nated to the 4-character signature (reference number || 
signature). A second signature is generated based on the 
required transaction data using the cardholder's corre- 
sponding secret key pre-stored in the database of the 
card issuer apparatus 300. Next, the extracted 
4-character signature is compared with the first 4 charac- 
ters of the second signature. Upon verification and ap- 
proval of the transaction, the apparatus 300 sends an au- 
thorization message to the merchant apparatus via the 
acquirer apparatus (see step S5). FIGURE 5D shows an ex- 
ample of data contained in an authorization message in- 
cluding a digital signature 540, which is transmitted from 
the card issuer apparatus 300 to the merchant apparatus. 
[0058] At step 440, upon receiving the authorization message 

from the card issuer apparatus 300, the merchant appara- 
tus prints a transaction slip as shown in FIGURE 5E with 
the digital signature (reference number || signature) 550 
printed on the transaction slip. The card is then returned 



to the cardholder along with the printed transaction slip 
(see step S6), without the need for the cardholder to man- 
ually sign the transaction slip. The transaction is thereby 
completed. 

[0059] N 0 te that only the effected parties such as the cardholder 
and the card issuer are discussed in detail. The acquirer is 
only mentioned briefly. 

[0060] T he steps S2, S3 and S6 of FIGURE 4B, alternatively, can be 
done electronically such as by means of wireless commu- 
nication between the cardholder's apparatus and the mer- 
chant's apparatus. In such a case: in step S2, the transac- 
tion data is electronically transmitted from the merchant's 
apparatus to the cardholder's apparatus; in step S3, the 
card data and the generated signature are electronically 
transmitted from cardholder's apparatus to the mer- 
chant's apparatus; and in step S6, a transaction journal 
containing the digital signature are electronically trans- 
mitted from the merchant's apparatus to the cardholder's 
apparatus. 

[0061] The embodiment of FIGURE 4B can be securely applied to 
transactions over the Internet. Disclosure of the card data 
to the merchant over the Internet bears no risk at all due 
to the fact that the approval of the transaction depends 



upon the dynamic digital signature of the cardholder. In 
such a case: at step S2, a transaction amount is displayed 
on the screen; at step S3, a card data and a digital signa- 
ture are input to the system; and at step S6, a notification 
of the status of the transaction can be provided to the 
cardholder. The merchant can be a goods supplier, a ser- 
vice provider, a mortgage lender, etc. 
[0062] other embodiments for non-transactional requests such 
as the change of credit limit, request for supplemental 
card, etc. can also be done through telephone or the In- 
ternet. 

[0063] Certain signature generation techniques can be used to 
produce a short signature for convenience and practical- 
ity, especially if the digital signature is to be presented 
manually. 

[0064] one example for generation and verification of a signature 
employs a symmetric cryptosystem such as DES. At the 
generation step 120 of FIGURE 1: (1) encrypt the transac- 
tion data using cardholder's secret key; and (2) take a 
portion of the encrypted data, for example, the first 4 
characters to be the signature. At verification step 130 of 
FIGURE 1: (1) encrypt the same transaction data using the 
corresponding secret key to produce another encrypted 



data; and (2) take the first 4 characters of the newly en- 
crypted data and compare with the signature. 

[0065] FIGURE 6 illustrates an embodiment for producing a short 
signature with improved security. In this example, for il- 
lustrative purpose, the signature has a length of 4 charac- 
ters and the reference number has a length of 4 charac- 
ters. Each cardholder is assigned a particular combination 
code in similar fashion to a PIN (personal identification 
number). The 4-character signature and the 4-character 
reference number are combined or mixed into a single 
8-character code, based on a given combination code. 
The resulting 8-character code is then used as the digital 
signature for the transaction. The embodiment has 2 main 
sections, which are the combination section 610 and the 
de-combination section 630. 

[0066] jo implement the combination section 610, the card- 
holder apparatus 200 of FIGURE 2 is further facilitated 
with: a file for securely storing a particular combination 
code; and a sub-program for combining the 4-character 
intermediate signature and the 4-character reference 
number into a single 8-character code based on the given 
combination code. 

[0067] jo implement the de-combination section 630, the card 



issuer apparatus 300 of FIGURE 3 is further facilitated 
with: a database for securely storing the corresponding 
combination code for each cardholder; and a sub- 
program for separating/recovering the 4-character inter- 
mediate signature and the 4-character reference number 
from the received 8-character signature code based on 
the given corresponding combination code. 

[0068] The combination code for each cardholder can be 

changed from time to time such as by downloading the 
new combination code to the cardholder apparatus 200 
through SMS, for example. Every change of the combina- 
tion code at the apparatus 200 will also reflect the change 
of the corresponding combination code in the card issuer 
database at the apparatus 300. The change of the combi- 
nation code can be based on the cardholder request or the 
card issuer initiative. Furthermore, the change of the 
combination code can optionally be done through an ATM 
or other electronic delivery channels. 

[0069] The combination section 610 is now described. At the sig- 
nature generation step 612, a 4-character signature 
"SIGN4" is generated based on the transaction amount 
"AMT" 614 and the 4-character reference number 
"REFN04" 616. The reference number can be a random 



number generated at the apparatus 200 or a pre-stored 
number issued by the card issuer. 

[0070] At step 618, the generated "SIGN4"is combined with the 
"REFN04" 616 to produce an 8-character code "SIGN8", 
based on the combination code "CCODE"620 pre-stored 
at the cardholder apparatus 200. The resulting "SIGN8" is 
then used as the signature of the transaction. 

[0071] The de-combination section 630 is now described. At step 
632, the received 8-character signature code "SIGN8" is 
de-combined to separate or recover the 4-character code 
"SIGN4" and the reference number "REFN04" based on the 
corresponding combination code "CCODE" 634, associated 
with the cardholder, pre-stored at the card issuer appara- 
tus 300. 

[00 72 ] At step 636, the recovered "SIGN4"is then verified based 
on the received amount 614 and the recovered reference 
number "REFN04". 

[0073] The use of the combination code 620 along with the ref- 
erence number 616 provides even more security than us- 
ing just the reference number 616. As mentioned above, 
the reference number 616 can help prevent fraud where 
the same digital signature is used for purchases for the 
same amount of money. However, there is still the possi- 



bility of fraud if an unauthorized party can determine the 
reference number 616. The combination code 620 pro- 
vides even greater security by making it difficult for an 
unauthorized party to determine the reference number 
just by looking at a digital signature. 

[0074] N 0te t hat in the above description, the 4-character code 
"SIGN4" and the 4-character reference number "REFN04" 
were used merely for illustrative purposes. Other lengths 
of character codes can also be used. The signature can be 
produced using a symmetric cryptosystem such as DES or 
another mathematical formula, and a portion of the gen- 
erated code, for example the first 4 characters of the gen- 
erated code can be taken to produce "SIGN4". 

[0075] The embodiment of FIGURE 6, based on the secrecy of the 
combination code, optionally allows a digital signature to 
be generated without using any cryptographic algorithm 
or a complex mathematical formula. Instead, the digital 
signature can be generated using a very simple arithmetic 
operation such as an "addition" or a "subtraction". For ex- 
ample, the reference number is randomly generated at the 
cardholder apparatus 200 of FIGURE 2. At the generation 
step 612, a first signature is produced by adding the ref- 
erence number to the amount. The amount can be trun- 



cated or padded to the required length. At the combina- 
tion step 618, the first signature is combined with the ref- 
erence number based on the combination code, securely 
pre-stored in the apparatus 200 to produce a second sig- 
nature. At the de-combination step 632, the received sec- 
ond signature is de-combined to separate or recover the 
first signature and the reference number based on the 
corresponding combination code, securely pre-stored at 
the card issuer apparatus 300. At the verification step 
636, a verification signature is produced by adding the 
recovered reference number to the received amount in the 
same way as in the generation step 612 above. The re- 
sulting verification signature is then compared with the 
recovered first signature. The card account number can 
additionally be used in the arithmetic operation. Note that 
the security of this scheme depends solely on the secrecy 
of the combination code. 
[0076] Furthermore, multiple combination codes can be assigned 
and maintained in the cardholder apparatus and dynami- 
cally selected by the cardholder for each transaction. In 
this case, a combination code identifier for the selected 
combination code is required, which can be embedded 
within the signature code. 



[0077] FIGURES 7 A and 7B show several examples of defining the 
combination codes between the 4-character code "SIGN4" 
and the 4-character reference number "REFN04" accord- 
ing to the embodiment of FIGURE 6. The particular values 
of alphabetic "ABCD" for "SIGN4" and numeral "8519" for 
"REFN04" are for illustrative purposes and the invention is 
of course not limited to these values. 

[0078] The present invention may be embodied in other forms 
without departing from its spirit and scope. The embodi- 
ments described above are therefore illustrative and not 
restrictive, since the scope of the invention is determined 
by the appended claims rather then by the foregoing de- 
scription, and all changes that fall within the meaning and 
range of equivalency of the claims are to be embraced 
within their scope. 



